About this role

Job Title

Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)

Location: Bangalore

Role Summary

We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.

Ideal Candidate Profile

- 8-10 years in Vulnerability Management.
- 7+ years of hands-on Qualys VMDR administration.
- Proven experience in QGS migrations and deployment projects.
- Experience managing environments with 20,000+ assets.
- Strong stakeholder management and executive reporting skills.
- Ability to lead vulnerability review meetings and remediation governance programs.

Key Responsibilities

Vulnerability Management OPS and implementation.

- Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
- Own the complete vulnerability lifecycle: Discovery
- Assessment
- Prioritization
- Remediation Tracking
- Validation
- Reporting

- Develop risk-based remediation strategies aligned with business priorities.
- Review and validate Critical, High, and Zero-Day vulnerabilities.
- Drive vulnerability reduction initiatives and SLA compliance programs.
- Conduct vulnerability trend analysis and management reviews.

Qualys VMDR Administration

- Serve as Subject Matter Expert (SME) for Qualys VMDR.
- Design and maintain: Asset Groups
- Dynamic Tags
- Business Units
- Scan Profiles
- Option Profiles
- Remediation Policies

- Manage authenticated scanning for: Windows
- Linux
- Network Devices
- Databases

- Optimize scan performance and asset coverage.
- Troubleshoot scanning failures and credential issues.
- Manage VMDR Dashboards and Reporting Frameworks.

Qualys Gateway Service (QGS) Migration & Management

Primary Focus Area

- Lead QGS migration projects from On-Prem to Cloud environments.

Responsibilities

- Design migration architecture for Qualys Gateway Services.
- Install, configure, upgrade, and maintain QGS infrastructure.
- Perform migration planning, testing, deployment, and rollback activities.
- Conduct connectivity validation and health checks.
- Validate scanner communication between: Qualys Cloud Platform
- Internal Assets
- Remote Networks

- Troubleshoot: Connectivity issues
- Certificate issues
- Firewall restrictions
- Network routing issues

- Coordinate with: Network Teams
- Cloud Teams
- Infrastructure Teams

- Develop QGS migration runbooks and operational documentation.
- Perform post-migration health checks and stabilization activities.
- Develop migration runbooks and operational documentation.

Expected Experience

- Multiple QGS deployment and migration projects.
- Hybrid cloud environments.
- Azure, AWS, OCI, VMware environments.
- Proxy and firewall integrations.

Executive Reporting & Metrics

Must Have Expertise

- Build Executive Vulnerability Dashboards.
- Present cyber risk posture to leadership teams.
- Track and report: Total Vulnerabilities
- Critical Vulnerabilities
- High Vulnerabilities
- Remediation Trends
- SLA Compliance
- Asset Coverage
- Scan Coverage
- Vulnerability Aging
- Risk Reduction Metrics

Reporting Tools

- Qualys Reporting
- Power BI
- Excel Dashboards
- ServiceNow Reporting

Sample Reports

- Weekly Executive Security Dashboard
- Monthly Vulnerability Review
- Risk-Based Prioritization Reports
- Regulatory Compliance Reports
- KPI/KRI Reports
- Vulnerability Trending Analysis

Vulnerability Remediation Governance

- Coordinate remediation activities with: Windows Teams
- Linux Teams
- Network Teams
- Application Owners

- Conduct remediation review meetings.
- Monitor SLA adherence.
- Define remediation priorities based on: CVSS
- EPSS
- Exploit Availability
- Asset Criticality

- Validate fixes through rescanning.

Automation & Integration

- Utilize Qualys APIs for automation.
- Integrate Qualys with: ServiceNow
- Jira
- CMDB
- SIEM Platforms

- Develop scripts using: PowerShell
- Python

- Automate reporting and remediation tracking.

Required Skills

Vulnerability Management

- Vulnerability Lifecycle Management
- Risk-Based Vulnerability Management
- CVSS v3/v4
- Vulnerability Prioritization
- Remediation Validation
- Executive Reporting
- Audit Support

Qualys Expertise

- Qualys VMDR
- Qualys Gateway Service (QGS)
- Asset Management
- Policy Compliance
- Patch Management Module
- Report Templates
- Dynamic Tagging
- Cloud Agents
- Scanner Appliances
- VMDR Dashboards

Operating Systems

- Windows Server
- Linux (RHEL, CentOS, Ubuntu)
- Active Directory
- DNS
- DHCP

Cloud Platforms

- Azure
- AWS
- Oracle Cloud (OCI)
- VMware
- Hybrid Cloud

Tools

- Qualys VMDR
- ServiceNow
- Power BI
- Excel
- Splunk / Sentinel
- Jira

Preferred Certifications

- Qualys VMDR Specialist
- Qualys Certified Professional
- CISSP
- CEH
- Security+
- Microsoft Azure Security Certifications

Good-to-Have

Armis Asset Intelligence & Exposure Management

Required Armis Experience

- Administer and support Armis platform deployments.
- Perform enterprise asset discovery and inventory management.
- Monitor managed, unmanaged, IoT and OT assets.
- Identify vulnerable, rogue, and end-of-life assets.
- Correlate asset intelligence with Qualys vulnerability findings.
- Leverage Armis for attack surface visibility and cyber asset exposure management.
- Track device ownership and remediation accountability.
- Create exposure-based risk reports using Armis insights.
- Monitor: IoT Devices
- Network Infrastructure
- Endpoints
- Cloud-connected Assets

Armis Integrations

- Qualys VMDR
- ServiceNow CMDB
- Microsoft Sentinel
- Splunk
- CrowdStrike
- Active Directory